Bouncy Castle Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined18

Produkt

Bouncy Castle JCE Provider12
Bouncy Castle Legion of the Bouncy Castle2
Bouncy Castle Crypto2
Bouncy Castle BKS-V12

Przeciwdziałanie

Official Fix16
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined18

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent2
Network16

Uwierzytelnianie

Not Defined0
High0
Low2
None16

Interakcja z użytkownikiem

Not Defined0
Required0
None18

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤54
≤64
≤74
≤86
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤56
≤62
≤78
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤50
≤612
≤70
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤42
≤50
≤64
≤70
≤88
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k18
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k18
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (10): BC (1), BC-FJA (3), BC-FNA (1), BC C# (1), BC Java (1), BKS-V1 (1), Crypto (1), JCE Provider (10), Java Library (1), Legion of the Bouncy Castle (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2022-11-215.04.9Bouncy Castle BC-FJA FIPS Java API denial of serviceNieznanyNot DefinedOfficial Fix0.000450.07CVE-2022-45146
2021-05-212.62.5Bouncy Castle BC Java/BC C#/BC-FJA/BC-FNA EC Math Library information disclosureProgramming Language SoftwareNot DefinedOfficial Fix0.001280.02CVE-2020-15522
2020-12-185.55.5Bouncy Castle Legion of the Bouncy Castle Utility Method OpenBSDBCrypt.checkPassword privilege escalationNieznanyNot DefinedOfficial Fix0.005530.00CVE-2020-28052
2019-10-086.46.4Bouncy Castle Crypto ASN.1 Parser denial of serviceNieznanyNot DefinedNot Defined0.005910.02CVE-2019-17359
2018-06-057.46.9Bouncy Castle BC/BC-FJA RSA Key Pair Generator weak encryptionNieznanyNot DefinedOfficial Fix0.005370.00CVE-2018-1000180
2018-06-046.56.1Bouncy Castle JCE Provider ECIES weak encryptionNieznanyNot DefinedOfficial Fix0.001880.02CVE-2016-1000352
2018-06-044.74.3Bouncy Castle JCE Provider DH Public Key Remote Code ExecutionNieznanyNot DefinedOfficial Fix0.003270.02CVE-2016-1000346
2018-06-045.75.4Bouncy Castle JCE Provider DHIES/ECIES privilege escalationNieznanyNot DefinedOfficial Fix0.003810.00CVE-2016-1000345
2018-06-046.56.1Bouncy Castle JCE Provider DHIES weak encryptionNieznanyNot DefinedOfficial Fix0.001880.04CVE-2016-1000344
2018-06-047.46.9Bouncy Castle JCE Provider DSA Key Generator weak encryptionNieznanyNot DefinedOfficial Fix0.005430.00CVE-2016-1000343

7 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 7 results.

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!